Problem in Proxy setting

[prathap_3]

Hi All,

we are facing a problem here while installing a new proxy.... when we start the squid instance it is failing to start...

in messages the error is generated as follows:



Aug 2 19:55:17 IC-PROXY-03 squid[3769]: Squid Parent: child process 3771 starte
d
Aug 2 19:55:17 IC-PROXY-03 kernel: audit(1154528717.403:0): avc: denied { cre
ate } for pid=3771 exe=/usr/sbin/squid key=3861504 scontext=root:system_r:squid
_t tcontext=root:system_r:squid_t tclass=msgq
Aug 2 19:55:17 IC-PROXY-03 (squid): msgget failed
Aug 2 19:55:17 IC-PROXY-03 squid[3769]: Squid Parent: child process 3771 exited
due to signal 6



please help us in resolving the issue... many thanks in advance...

Regards,
prathap

[Vipulinux]

Hi Prathap

Your SELINUX policy is denying the excution of /usr/sbin/squid

Configure selinux to allow squid.
Or put selinux is warning state.

Cheers
VIpul

[prathap_3]

Hi,

Could u pls elobarate as i new to LINUX and mine is redhat ES 4

[g33k]

SELinux is NSA project see http://www.nsa.gov/selinux/
there is also documentation.
afaik RH is using SELinux to increase security.